CLEANSTART-2026-XE23259 Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

Security vulnerability affects the nodejs-24 package. Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...

CLEANSTART-2026-OM41061 Improper Certificate Validation in Node

Security vulnerability affects the nodejs-24 package. Improper Certificate Validation in Node...

CLEANSTART-2026-YO77738 HTTP request smuggling in Node

Security vulnerability affects the nodejs-24 package. HTTP request smuggling in Node...

CLEANSTART-2026-QZ70623 In nghttp2 before version 1

Security vulnerability affects the nodejs-24 package. In nghttp2 before version 1...

CLEANSTART-2026-OH78893 implementation of realpath in libuv < 10

Security vulnerability affects the nodejs-24 package. The implementation of realpath in libuv 10...

CLEANSTART-2026-KV06293 Node

Security vulnerability affects the nodejs-24 package. A Node...

CLEANSTART-2026-ES54062 Node

Security vulnerability affects the nodejs-24 package. Node...

CLEANSTART-2026-MS57961 Node

Security vulnerability affects the nodejs-24 package. Node...

CLEANSTART-2026-SS08335 cryptographic vulnerability exists in Node

Security vulnerability affects the nodejs-24 package. A cryptographic vulnerability exists in Node...

CVE-2026-87587 affecting package nodejs for versions less than 24.22.0-1

CVE-2026-87587 affecting package nodejs for versions less than 24.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18540 affecting package nodejs for versions less than 24.22.0-1

CVE-2026-18540 affecting package nodejs for versions less than 24.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16729 affecting package nodejs for versions less than 24.22.0-1

CVE-2026-16729 affecting package nodejs for versions less than 24.22.0-1. An upgraded version of the package is available that resolves this issue...

AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1791841538)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791841538 advisory. - Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service DoS via the addGitSha function. An attacke...

Oracle Linux 8 : nodejs:22 (ELSA-2026-75870)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75870 advisory. - Patches pacote CVE and updates undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259888 RHEL-255268 nodejs-nodemon - Rebase...

Oracle Linux 9 : nodejs:22 (ELSA-2026-76750)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76750 advisory. - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

MiracleLinux 9 : nodejs:22 (AXSA:2026-2084:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2084:01 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequest...

RHEL 9 : nodejs:22 (RHSA-2026:84589)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84589 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

MiracleLinux 8 : nodejs:22 (AXSA:2026-2091:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2091:01 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequest...

SUSE CVE-2026-96294

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...